HackingData ExfiltratedCustomer Data InvolvedIDENTITY_BASICIDENTITY_GOVERNMENTFINANCIAL_ACCOUNTMediumContained
SN Servicing Corporation
bd_7b8b73c450e5945f · schema v1 · pii pii-v1
Full breach record for SN Servicing Corporation →SN Servicing Corporation notified South Carolina and other state residents of a cybersecurity incident discovered on October 15, 2020. Unauthorized access to the network resulted in the exfiltration of borrower data, including names, contact info, DOB, SSNs, and loan details. SN terminated access, hired forensic investigators and a data mining vendor, and provided complimentary credit monitoring to affected individuals.
Leak gap clock✗ Leak >180d41 weeks discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
This filing is one of 7 about the same incident.View merged incident
A leak claim by egregor about this victim predates this filing by 284 days.View originating leak claim
Linked disclosures
Why this link?Ransomware claims (1)
- bd_4bc6fb5649261ccfLeak Siteegregorfiled 2020-10-15(284d gap)Verified
Regulatory filings (5) · sorted by filing gap
- bd_376b6357c22f175fMaine State AGfiled 2021-07-16(10d gap)Verified
- bd_d479dd57d0545f1fOregon State AGfiled 2021-07-16(10d gap)Verified
- bd_d772c960f49e9ed8California State AGfiled 2021-07-16(10d gap)Verified
- bd_0424e3f59662bb0dCalifornia State AGfiled 2021-01-29(178d gap)Verified
Show 1 more filing ↓Show fewer ↑up to 192d gap
- bd_62f5a428547a502dMaine State AGfiled 2021-01-15(192d gap)Verified by operator
Source provenance
- Source URL
- https://consumer.sc.gov/sites/consumer/files/Documents/Business%20Resources%20Laws/Related%20Laws/Breaches/2021/SNServicingCorp.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Jul 26, 2021
- Raw hash
- c6ede63b0d7240a7dfcd74ac522eb68bd79e10f70d298d5dd2caf3787f8566c2
Reporting entity
- Name
- SN Servicing Corporationnorm: sn servicing
Victim entity
- Name
- SN Servicing Corporationnorm: sn servicing
Incident
- Discovered
- Oct 15, 2020
- Materiality determined
- —
- Notification sent
- —
- Affected individuals
- Not disclosed
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENTFINANCIAL_ACCOUNT
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1190 Exploit Public-Facing ApplicationT1041 Exfiltration Over C2 Channel
- Threat actor
- External
- Regulator citations
- Notified state regulators
- Initial access
- exploit_public_facing
Compliance
- Time to disclose
- 41 weeks(284 days from discovery to filing)
- Compliance flags
- Leak >180d
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.